wardriving

Wardriving 여기에서 Ekoparty 2017의 Wardriving 워크숍에 관한 모든 데이터를 찾을 수 있습니다. Faraday 플러그인 import로 시작하는 파일들은 모두 Faraday 플러그인과 함께 사용되는 모듈입니다. 실행하려면 다운로드하여 faradayinstallation/bin/에 복사하십시오. Faraday 플러그인에 대한 자세한 내용은 공식 문서를 참조하십시오. importdnspcap.py importdnspcap.py 파일은 개방형 WiFi 네트워크에서 저장된 모든 패킷을 읽습니다. 암호화되지 않...

eko2020-challenge

Ekoparty 2020을 위한 Faraday 챌린지. 실행 방법: git clone https://github.com/infobyte/eko2020-challenge cd eko2020-challenge pip3 install flask flask-mail python hello.py...

ekoparty

EKOPARTY MIAMI 概要 EKOPARTY Miami のスライドと資料。 Youtube リンク: https://youtu.be/FdvrwQH7LYU?si=MVD8NMykO39dP0v9 Google 動画リンクは PDF 内に埋め込まれています...

TippingPoint Threat Intelligence and Zero-Day Coverage – Week of August 7, 2017

Earlier this month, a blog post from Blue Frost Security was released stating that they were giving away tickets to the upcoming Ekoparty Security Conference in Argentina. But there was a catch: in order to get the tickets and free whiskey, entrants had to complete an exploitation challenge and...

Faraday 1.0.15 - Collaborative Penetration Test and Vulnerability Management Platform

A brand new version is ready for you to enjoy! Faraday v1.0.15 Community, Pro & Corp was published today with new exciting features. As a part of our constant commitment to the IT sec community we added a tool that runs several other tools to all IPs in a given list. This results in a major scan ...

Flaw in Oracle Logon Protocol Leads to Easy Password Cracking

There is a serious vulnerability in the authentication protocol used by some Oracle databases, a flaw that could enable a remote attacker to brute-force a token provided by the server prior to authentication and determine a user’s password. The attacker could then log on as an authenticated user...

CRIME Attack Uses Compression Ratio of TLS Requests as Side Channel to Hijack Secure Sessions

The new attack on TLS developed by researchers Juliano Rizzo and Thai Duong takes advantage of an information leak in the compression ratio of TLS requests as a side channel to enable them to decrypt the requests made by the client to the server. This, in turn, allows them to grab the user’s logi...

Security Solutions for Beast attack against SSL/TLS Vulnerability

Security Solutions for Beast attack against SSL/TLS Vulnerability Juliano Rizzo and Thai Duong presented a new attack on Transport Layer Security TLS at the Ekoparty security conference in Buenos Aires, Argentina. The researchers found that encryption, which should protect us, when we connect to...

Ekoparty

A mainstay for the Latin American security community, Ekoparty burst into the limelight this year with a presentation reported first by Threatpost.com on a hole in Microsoft’s ASP.NET technology that could render the security on millions of Web sites obsolete. Now in its sixth year, the annual...